Someone else controls my domain — how do I get it back?

Why this is the serious one

Everything else about a website can be rebuilt. Files, design, content, hosting — expensive and annoying, but possible.

A domain cannot. It is your address, and there is exactly one of it. Every link anyone ever made to you, every printed card, every search result and often your email all depend on it continuing to point where you say.

So treat this as urgent even when nothing is currently broken.

First, find out what is actually true

Look up the registration. Any WHOIS service will show you the registrar holding the domain, the registered contact where that is public, and — the important one — the expiry date.

Three possibilities:

You are the registrant and simply lost access. The best case by far. Recover the account through the registrar's password reset, using the email on file.

Someone else is the registrant. A developer, an agency, a former employee, a family member who set it up. This is the common case and it is usually fixable.

The registrant details are private. Common and not sinister. You will need to work through the registrar.

If a developer or agency holds it

Ask first, plainly and without accusation:

Could you transfer the domain to an account in our business's name? Happy to set up the account and cover any fee.

Most people say yes. It is admin, not a hostage situation, and many developers registered it years ago simply because it was faster at the time.

If they agree, the process is standard: they unlock the domain, provide an authorisation code, and you initiate the transfer at your own registrar. It usually takes a few days.

If they refuse or have vanished

Go to the registrar directly. This is the step most people do not realise exists.

Registrars have dispute processes for exactly this situation, and evidence that the business trading under that name is yours carries real weight: company registration, trademark if you have one, invoices showing you paid for the domain, long-standing use of the name.

Have that evidence ready before you contact them. A clear, documented case moves considerably faster than an angry one.

The mistake that makes it permanent

Letting it expire while you argue about it.

An expired domain enters a grace period, then a costly redemption period, then it is released for anyone to register. Desirable domains are watched by services that buy them the moment they drop.

So if the expiry date is close: pay to renew it, even if the ownership dispute is unresolved. Renewing a domain you are fighting over is vastly cheaper than recovering one somebody else has bought. Sort out who owns it afterwards.

While you are resolving it

Make sure your email still works. It frequently runs on the same domain, and losing it is often more urgent than the website.

Keep your Google Business Profile current. It carries your phone number, hours and address independently of the domain, and for local searches it is often what people see first anyway.

Do not start a new domain in a panic. Moving to a new address throws away everything the old one accumulated. Exhaust recovery first.

Preventing the repeat

Once you have it back:

• Register it to the business, with a role-based email like admin@ rather than a person's inbox
• Turn on auto-renew, with a card that will not expire before the domain does
• Turn on registrar lock, which prevents transfers without your explicit authorisation
• Put the renewal date in a calendar as a backstop

Then check the same three things for anything else you depend on: hosting, your email, your business listings. The domain is the one that hurts most, but it is rarely the only thing registered in somebody else's name.

What to insist on next time

The prevention section above is the whole lesson, and it compresses into one sentence you can use with any future supplier:

"Register the domain in my business's name, with my email as the registrant contact, and confirm that in writing."

Nobody reasonable objects to this. A supplier who does is telling you something useful, for free, very early.

It is also fair to ask how a platform handles it before committing, because the answer varies more than you would expect. Helm registers the domain in the client's business name as standard and never holds it as leverage — which is less a feature than the only defensible version of this arrangement. The test is not what happens while everyone is getting along. It is what happens on the day you want to leave.